move Encryptor::GPG live spec to VM

finally... no more spec-live.